URGENT!! Decrypt files after deleting encryption certificate

RolandJS said:

I take it your Recycle Bin does not have that file anymore? If that is so, the best way I know of:
-- using another computer, download, install, any one of a number of file undeleters
-- from that 2nd computer, create a usb flash drive boot and it should include the utilities needed
-- using the created usb flash drive, boot the computer with the missing file - and follow the undeleter prompts
If at all possible, stop using the computer with that missing file, the more Windows runs, the more stuff it writes and writes.

Hello
No the files aren't in my Recycle Bin. I talked to Microsoft support after that and he said create another user account. Sadly I didn't know that the certificate files are actually stored in the Windows' drive. I was so nervous that I didn't think of that at all and he didn't mention it too. So if there was a chance to recover he killed it!

Also it's a SSD with TRIM enabled so it's difficult to recover the actual files. I've tried the deepest scans with various bootable recovery apps but didn't help. So I'm just hoping for another method maybe recovering them from registry or somewhere else, or maybe any 3rd party software to decrypt them without certificate.

RolandJS said:

There is a very slim chance the recent writes did not overwrite the certs yet. I have no more advice for you on how to check further. Deep scans from a few data/file recovery utilities might or might not be helpful.

Hello thank you for your respond.

Yes I was hoping for the same thing but unfortunately the recovery apps are just giving me the files that is currently on the drive.

Try3 said:

You have exhausted all the possibilities.
- There is no known method of recovering the certificate - your only hope was to find it in the recycle bin or by using an undelete utility.
- I have never heard of any third-party tool that decrypts files without a certificate.

Sorry to be the bearer of bad news but I thought you should not be left hanging on for a response to your last post.

Denis

Hello
Don't feel bad man, I appreciate your respond and the fact that you cared about the problem.

It was my fault and I know it .

It's just when we're hopeless we start to think about any possible and even imaginary ways to solve our problems.

I've had all of my personal photos from 15 years ago inside that folder! I was a complete idiot for not backing them up somewhere else!

Again thank you.

RolandJS said:

"...unfortunately the recovery apps are just giving me the files that are currently on the drive..." Do you mean files that can be presently recovered by said utility? There is no reason for any recovery utility to give you a list of existing, nonDeleted, files.

Hello, Sorry for late reply, I gave up on my files and I'm convinced that they're gone for good.

And about the recovery apps yes because it's a SSD drive and a lot of data was written on it at the time, those apps couldn't recover my deleted certificates and instead they were showing me a list of files as in good condition and recoverable, but in fact they're not deleted files. I don't know why but it's just how recovery apps work with SSDs.

Bottom line Deleted files can't be recovered on and SSD drive. Because of the TRIM and how those drives work.

Black Boy said:

Bottom line Deleted files can't be recovered on and SSD drive. Because of the TRIM and how those drives work.

Yes. After files are deleted and a Trim operation is executed, in principle they are not recoverable.